Vendor

Trend Micro

496 known vulnerabilities.

Trend Micro at a glance

Last 12 months: 19
Critical · all time: 15
Exploited · all time: 12
Public exploit · all time: 38

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	0	0
Oct 2026	0	0
Sep 2026	0	0
Aug 2026	0	0
Jul 2026	0	0
Jun 2026	0	0
May 2026	16	2
Apr 2026	0	0
Mar 2026	0	0
Feb 2026	0	0
Jan 2026	3	1
Dec 2025	0	0
Nov 2025	0	0
Oct 2025	0	0
Sep 2025	0	0
Aug 2025	2	2
Jul 2025	4	0
Jun 2025	28	6
May 2025	0	0
Apr 2025	5	0
Mar 2025	2	0
Feb 2025	1	0
Jan 2025	0	0
Dec 2024	9	0

Most common weaknesses

Products

Trend Micro Apex One 150 Trend Micro OfficeScan 53 Trend Micro Worry-Free Business Security 47 Trend Micro Apex One as a Service 38 Trend Micro Apex Central 36 Trend Micro Security (Consumer) 30 Trend Micro Email Encryption Gateway 18 Trend Micro InterScan Web Security Virtual Appliance 17 Trend Micro Deep Security 13 Trend Micro Password Manager 12 TrendAI Apex One 12 TrendAI Apex One as a Service 12 Trend Micro Antivirus for Mac (Consumer) 12 Trend Micro Control Manager 11 Trend Micro Moibile Security for Enterprise 9 Trend Micro Smart Protection Server (Standalone) 8 Trend Micro Endpoint Encryption Policy Server 8 Trend Micro HouseCall for Home Networks 7 Trend Micro Maximum Security 6 Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 6 Trend Vision One 5 Trend Micro Antivirus for Mac 5 Trend Micro Home Network Security 5 Trend Micro ServerProtect for Linux 5 Trend Micro ServerProtect for Storage 4 Trend Micro ServerProtect for EMC Celerra 4 Trend Micro ServerProtect for Network Appliance Filers 4 Trend Micro ServerProtect for Microsoft Windows / Novell Netware 4 Trend Micro Mobile Security for Enterprise 4 Trend Micro Deep Security Agent 4 TrendAI Apex One (Mac) 4 Trend Micro Worry-Free Business Security Services 3 Trend Micro Vulnerability Protection 3 Trend Micro Deep Discovery Inspector 3 Trend Micro Anti-Threat Toolkit (ATTK) 3 Trend Micro InterScan Messaging Security Virtual Appliance 3 Mobile Security (Enterprise) 3 Trend Micro Deep Discovery Director 3 Trend Micro ScanMail for Exchange 3 Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) 3

Latest advisories

Medium max 7.8

WID-SEC-2026-1643 8 CVEs 1 exploited rev. 2

Trend Micro Apex One: Mehrere Schwachstellen ermöglichen Privilegieneskalation und die Ausführung von Code

Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

Trend Micro Windows

May 28, 2026
first May 21, 2026
High max 9.8

WID-SEC-2026-0509 8 CVEs rev. 3

Trend Micro Apex One: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um beliebigen Programmcode auszuführen, und um seine Privilegien zu erhöhen.

Trend Micro Linux Windows

May 21, 2026
first Feb 24, 2026
Critical max 10.0

WID-SEC-2025-2196 4 CVEs rev. 29

Redis: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Oracle Google Red Hat Trend Micro F5 Linux

May 19, 2026
first Oct 5, 2025
High

WID-SEC-2026-0587 0 CVEs

Trend Micro Apex Central: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Trend Micro Apex Central ausnutzen, um seine Privilegien zu erhöhen, und um Daten zu manipulieren.

Trend Micro Windows

Mar 3, 2026
High max 9.8

NCSC-2026-0004 3 CVEs

Kwetsbaarheden verholpen in Trend Micro Apex Central

Trend Micro heeft kwetsbaarheden verholpen in Trend Micro Apex Central.

Trend Micro

Jan 9, 2026

All Critical High Medium Low Exploited only Public exploit

496 results · Feed

High 7.8

CVE-2026-45208

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges…

Trend Micro TrendAI Apex One TrendAI Apex One as a Service

May 21, 2026
High 7.8

CVE-2026-45207

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.8

CVE-2026-45206

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One TrendAI Apex One as a Service

May 21, 2026
High 7.8

CVE-2026-34930

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.8

CVE-2026-34929

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.8

CVE-2026-34928

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.8

CVE-2026-34927

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

Trend Micro TrendAI Apex One TrendAI Apex One as a Service

May 21, 2026
Medium 6.7

CVE-2026-34926 Exploited Public exploit EPSS 13%

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker …

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
KEV May 21, 2026
High 7.8

CVE-2025-71217

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow …

Trend Micro TrendAI Apex One (Mac)

May 21, 2026
High 7.8

CVE-2025-71216

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local a…

Trend Micro TrendAI Apex One (Mac)

May 21, 2026
High 7.0

CVE-2025-71215

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification …

Trend Micro TrendAI Apex One (Mac)

May 21, 2026
High 7.8

CVE-2025-71214

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local atta…

Trend Micro TrendAI Apex One (Mac)

May 21, 2026
High 7.8

CVE-2025-71213

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.8

CVE-2025-71212

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privile…

Trend Micro TrendAI Apex One TrendAI Apex One as a Service

May 21, 2026
Critical 9.8

CVE-2025-71211

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

Trend Micro TrendAI Apex One TrendAI Apex One as a Service

May 21, 2026
Critical 9.8

CVE-2025-71210

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

Trend Micro TrendAI Apex One as a Service TrendAI Apex One

May 21, 2026
High 7.5

CVE-2025-69260

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial…

Trend Micro Trend Micro Apex Central

Jan 8, 2026
High 7.5

CVE-2025-69259

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create…

Trend Micro Trend Micro Apex Central

Jan 8, 2026
Critical 9.8

CVE-2025-69258

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an att…

Trend Micro Trend Micro Apex Central

Jan 8, 2026
Critical 9.4

CVE-2025-54987 EPSS 27%

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker…

Trend Micro Trend Micro Apex One

Aug 5, 2025
Critical 9.4

CVE-2025-54948 Exploited EPSS 33%

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker…

Trend Micro Trend Micro Apex One

Aug 5, 2025
KEV Aug 18, 2025
High 7.8

CVE-2025-53503

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to …

Trend Micro Trend Micro Cleaner One Pro

Jul 10, 2025
High 7.6

CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have al…

Trend Micro Trend Micro Worry-Free Business Security Services

Jul 10, 2025
High 7.8

CVE-2025-52837

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escala…

Trend Micro Trend Micro Password Manager

Jul 10, 2025
High 7.8

CVE-2025-52521

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Trend Micro Security (Consumer)

Jul 10, 2025
High 7.8

CVE-2025-49385

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Trend Micro Internet Security (Consumer)

Jun 17, 2025
High 7.8

CVE-2025-49384

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Trend Micro Internet Security (Consumer)

Jun 17, 2025
Medium 6.7

CVE-2025-48443

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege …

Trend Micro Trend Micro Password Manager

Jun 17, 2025
High 7.7

CVE-2025-49218

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to …

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
Critical 9.8

CVE-2025-49217

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
Critical 9.8

CVE-2025-49216

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to a…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
High 8.8

CVE-2025-49215

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to …

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
High 8.8

CVE-2025-49214

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authenti…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
Critical 9.8

CVE-2025-49213 EPSS 13%

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
Critical 9.8

CVE-2025-49212 EPSS 13%

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
High 7.7

CVE-2025-49211

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate p…

Trend Micro Trend Micro Endpoint Encryption Policy Server

Jun 17, 2025
Medium 5.5

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial…

Trend Micro Trend Micro Deep Security

Jun 17, 2025
High 7.8

CVE-2025-30641

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allo…

Trend Micro Trend Micro Deep Security

Jun 17, 2025
High 7.8

CVE-2025-30640

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privil…

Trend Micro Trend Micro Deep Security

Jun 17, 2025
High 7.5

CVE-2025-30680

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipu…

Trend Micro Trend Micro Apex Central

Jun 17, 2025

Trend Micro

Trend Micro at a glance

Most common weaknesses

Products

Latest advisories

Trend Micro Apex One: Mehrere Schwachstellen ermöglichen Privilegieneskalation und die Ausführung von Code

Trend Micro Apex One: Mehrere Schwachstellen

Redis: Mehrere Schwachstellen

Trend Micro Apex Central: Mehrere Schwachstellen

Kwetsbaarheden verholpen in Trend Micro Apex Central

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on aff…

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker …

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow …

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local a…

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification …

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local atta…

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on…

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privile…

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial…

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create…

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an att…

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker…

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker…

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to …

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have al…

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escala…

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that co…

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege …

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to …

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to a…

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to …

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authenti…

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentic…

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate p…

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial…

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allo…

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privil…

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipu…